At FUNDACIÓN ARRIVA HOSPITALITY GROUP, A.C., the personal information and data of our beneficiaries, charitable organizations, collaborators, donors, associates, employees, and suppliers are treated with the strictest confidentiality and discretion necessary to fulfill the purposes of the organization. We make an ongoing commitment to safeguard such information in accordance with Articles 3, Section I, 8, 15, 16, and 36 of the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and Articles 26, 27, and 30 of its Regulations.

FUNDACIÓN ARRIVA HOSPITALITY GROUP, A.C. is a non-profit civil association dedicated to working primarily alongside Civil Society Organizations to ensure that our programs and initiatives create meaningful impact and generate lasting social change.

In accordance with the right to the protection of personal data recognized in Article 6 of the Political Constitution of the United Mexican States, and in compliance with the Federal Law on the Protection of Personal Data Held by Private Parties, we process personal information based on the principles of lawfulness, consent, information, quality, purpose, loyalty, proportionality, and accountability.

FUNDACIÓN ARRIVA HOSPITALITY GROUP, A.C., located at Av. Vallarta No. 2526, Colonia Arcos Vallarta, Guadalajara, Jalisco, Mexico, C.P. 44130, telephone +52 (33) 3942-4030, email contacto@fundacionarrivahospitalitygroup.org, is responsible for collecting, protecting, and processing your personal data.

If the data subject does not fully and unconditionally accept the terms and conditions of this Privacy Notice, they must refrain from providing any personal information to FUNDACIÓN ARRIVA HOSPITALITY GROUP, A.C. through any physical, electronic, or digital means.

Purposes for Processing Personal Data

The personal information we collect from you will be used for the following purposes, which are necessary to provide the services you request:

• To facilitate fundraising activities and receive donations.
• Marketing and promotional communications.

Personal Data We Collect

To fulfill the purposes described above, we may collect the following personal information:

• Full name
• Marital status
• Federal Taxpayer Registry (RFC)
• Unique Population Registry Code (CURP)
• Place of birth
• Date of birth
• Nationality
• Home address
• Home telephone number
• Mobile phone number
• Personal email address
• Institutional email address
• Institutional telephone number
• Identification information
• Contact information

Some of the information listed above may be considered sensitive personal data under applicable law. Such information is processed under the highest standards of security, confidentiality, and privacy, solely for the legitimate purposes of protecting and serving our beneficiaries and stakeholders, and to fulfill the lawful objectives of FUNDACIÓN ARRIVA HOSPITALITY GROUP, A.C.

Your ARCO Rights

You have the right to:

• Access your personal data held by the Foundation.
• Request corrections if your data is inaccurate or incomplete.
• Request the deletion of your data when it is no longer necessary for the purposes described herein.
• Object to the processing of your personal data.
• Revoke your consent whenever legally applicable.

You may also limit the use or disclosure of your personal data at any time by contacting us at:

Email: contacto@fundacionarrivahospitalitygroup.org

Your request must be addressed to the person responsible for data protection within the organization.

Procedure for Exercising ARCO Rights

After providing your personal data, you have fifteen (15) calendar days to express your objection to its processing.

Requests must be submitted:

• In writing, or
• Electronically via the email address listed above,

with proof of submission.

At any time, data subjects may request access, correction, or deletion of their personal data by submitting a written request to the department responsible for data protection.

Within ten (10) business days, the Foundation will notify the applicant, in writing or electronically, of the resolution regarding the requested correction or deletion.

Your request must include:

1. Full name of the data subject and address or another means of communication.
2. Documents proving identity or legal representation.
3. Address, email, or other means to receive our response.
4. A clear and precise description of the personal data involved.
5. Any additional information that helps locate the requested data.

Cases in Which a Request May Be Denied

The Foundation may deny access, correction, deletion, or objection when:

• The applicant is not the data subject or legal representative.
• The requested data is not found in our records.
• The rights of a third party would be affected.
• A legal restriction or competent authority prevents disclosure or modification.
• The requested action has already been carried out.

If the denial is partial, the Foundation will grant access or process the portion of the request that is legally permitted.

In every case, the Foundation will explain the reasons for its decision and notify the applicant within the legally established timeframes through the same communication channel used to submit the request.

Cookies

FUNDACIÓN ARRIVA HOSPITALITY GROUP, A.C. uses cookies to recognize visitors when they access or return to our website.

A cookie is a small text file stored by your web browser on your device. Cookies help recognize users, support website functionality, evaluate website usage, and improve promotional campaigns.

Although you may browse our website with cookies disabled, some features may not function properly.

Our website may contain links to third-party websites. FUNDACIÓN ARRIVA HOSPITALITY GROUP, A.C. is not responsible for the privacy practices or content of those external websites. The inclusion of such links does not imply endorsement or approval.

Consent

If you do not agree with this Privacy Notice, you must refrain from providing personal information and from accessing, browsing, or using the services available on our website.

Your continued use of our website, together with the absence of an express objection, will be understood as your implied consent to the terms of this Privacy Notice.

The Foundation is committed to protecting any financial and/or sensitive personal data collected by implementing the highest security standards to ensure confidentiality.

In accordance with Article 9 of the Federal Law on the Protection of Personal Data Held by Private Parties, we will request your express consent before processing sensitive or financial personal information. Such consent may be provided by signing the document containing this Privacy Notice or electronically through the consent mechanisms available on our website.

Changes to this Privacy Notice

FUNDACIÓN ARRIVA HOSPITALITY GROUP, A.C. reserves the right to update, modify, or amend this Privacy Notice at any time. Any changes will be communicated in accordance with applicable law through publication at our offices and on our official website.

Purpose of this Privacy Notice

The purpose of this Privacy Notice is to define the scope and general conditions governing the processing of personal data, inform data subjects about how their information is collected and used, enable them to make informed decisions regarding their personal information, and maintain control over their data.

Likewise, this Privacy Notice promotes transparency regarding the Foundation’s processing of personal information.